Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.mft
File:                     Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.mft (raw, json)
Hash identifier:          VHL3rq7IK/3O7/7mscBkPDpKHiFqw0VSMY4AMVGhpqY=
Subject key identifier:   3D:42:FC:DD:07:B7:5A:0D:CF:9F:63:2C:80:03:C6:E5:D5:91:4F:82
Authority key identifier: 16:6F:ED:8B:B6:44:9B:1C:EC:6B:66:5E:93:07:18:B8:58:A2:B6:94
Certificate issuer:       /CN=166fed8bb6449b1cec6b665e930718b858a2b694
Certificate serial:       01940647D67A1BA7A871F67EA79183FCD2DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.mft
Manifest number:          0A08
Signing time:             Fri 27 Dec 2024 04:02:38 +0000
Manifest this update:     Fri 27 Dec 2024 04:02:38 +0000
Manifest next update:     Sat 28 Dec 2024 04:02:38 +0000
Files and hashes:         1: Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.crl (hash: n2EUT/vtPto1Heku8+IWq/4bJ92HhNsi31dgVeUDazI=)
                          2: aNXqmCzLbQnouT_jT1G1K7EstME.roa (hash: 8EnLT68MmT6qhkBXpPOlCTp8EieWlpovGv0PlCXvaIw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 04:02:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:47:d6:7a:1b:a7:a8:71:f6:7e:a7:91:83:fc:d2:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=166fed8bb6449b1cec6b665e930718b858a2b694
        Validity
            Not Before: Dec 27 04:02:38 2024 GMT
            Not After : Dec 28 04:02:38 2024 GMT
        Subject: CN=3d42fcdd07b75a0dcf9f632c8003c6e5d5914f82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d2:21:cc:b0:da:45:ae:9e:e3:91:8e:f6:82:
                    b6:dd:79:11:66:f6:76:0c:89:ed:a7:f2:84:3d:d1:
                    82:8c:a0:e6:04:7d:c7:6e:76:8e:ac:4d:e0:27:76:
                    d9:95:11:0e:f9:6a:71:3f:fe:fc:4c:88:56:dc:e3:
                    35:c2:ca:fc:11:0e:38:9b:0d:21:ed:a4:07:fb:4a:
                    b3:24:a4:96:24:88:b8:a0:64:7f:a5:51:5c:11:69:
                    00:b4:bb:e1:9c:4b:6c:19:bb:07:c4:9d:bd:83:89:
                    cd:b4:c5:f0:f8:b3:d4:7b:af:23:d6:6d:cc:17:9d:
                    4e:e0:3c:6a:6c:3e:fe:75:50:1a:85:23:c3:39:90:
                    9e:0e:51:3d:f6:79:a0:08:3d:c8:79:9a:00:d2:e3:
                    e0:88:a4:5e:3c:3d:3c:c4:1d:19:fe:e8:10:7d:6a:
                    15:4f:60:31:a1:06:6e:2a:8b:3f:ff:9d:8e:86:a7:
                    2a:9b:30:83:71:51:8d:7e:bb:ff:59:85:6d:04:5a:
                    46:f2:93:f1:61:9f:86:7b:e8:6b:44:b7:88:86:f6:
                    53:a7:c0:e3:e2:3a:d2:ef:2b:5b:e1:a4:53:c5:9c:
                    ec:a0:1f:b9:0b:5d:2b:1d:e7:3c:6f:78:7a:66:f9:
                    31:d6:5d:e0:62:db:0d:34:2a:59:ac:e3:aa:f4:80:
                    55:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:42:FC:DD:07:B7:5A:0D:CF:9F:63:2C:80:03:C6:E5:D5:91:4F:82
            X509v3 Authority Key Identifier:
                keyid:16:6F:ED:8B:B6:44:9B:1C:EC:6B:66:5E:93:07:18:B8:58:A2:B6:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:e4:09:0a:66:99:3d:5d:7e:2a:77:50:35:3a:61:4a:e3:9d:
         94:fb:ec:d2:09:35:49:d6:cd:77:6d:16:38:b6:ab:81:14:89:
         54:c2:38:ad:bb:33:6f:97:4b:c3:35:d2:6d:27:36:5d:2a:e9:
         d1:f3:a1:52:b6:ba:3b:fa:c4:12:d1:68:cc:82:4c:5a:b3:19:
         e9:ee:71:6d:25:df:3c:d9:d6:26:c6:b5:4a:25:27:11:10:bc:
         a9:ff:0d:60:98:a1:57:11:a4:d6:6a:df:17:54:4c:ad:36:ee:
         39:8b:e7:01:b0:f3:fc:b8:87:65:47:81:c7:b5:d9:20:73:e6:
         19:77:83:9f:07:17:05:75:e3:25:a4:45:93:b7:e9:06:a4:61:
         f9:cb:fd:fc:83:f5:21:b4:74:db:56:c4:a0:db:98:c7:52:b5:
         89:e6:5a:b7:04:c3:26:10:01:6d:cc:f9:27:3c:1d:9a:e6:74:
         ef:04:76:84:41:f0:3b:48:89:08:3f:cd:5d:37:6e:d6:56:92:
         5b:50:fc:72:46:b5:d4:f4:4a:87:2f:fd:60:2d:44:2a:27:e2:
         23:9d:02:f7:a7:f5:b1:18:3b:f9:81:9f:72:e4:f6:28:37:ba:
         b0:ef:94:a3:cb:94:35:4d:cf:34:6b:5a:9d:08:43:05:48:8c:
         1b:dc:05:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 10:44:28 2024 by rpki-client on console-fra.rpki-client.org